
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: Po4Dbknuv0qK0YG79R//f7wu9WxK7jfaOirS+7umtzs=
Subject key identifier: 31:64:C8:D1:55:F7:11:CD:2E:E1:50:5E:35:23:D2:C0:69:1F:70:38
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 01A06D5E3C90AF4600477F6EDECC6CAEA0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 1A3D
Signing time: Fri 04 Sep 2026 17:01:27 +0000
Manifest this update: Fri 04 Sep 2026 17:01:27 +0000
Manifest next update: Sat 05 Sep 2026 17:01:27 +0000
Files and hashes: 1: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: hn+AAFd6tJti8pdmhipQN3X1G3I+31kff4MfdfAiZyg=)
2: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (hash: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5e:3c:90:af:46:00:47:7f:6e:de:cc:6c:ae:a0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Sep 4 17:01:27 2026 GMT
Not After : Sep 5 17:01:27 2026 GMT
Subject: CN=3164c8d155f711cd2ee1505e3523d2c0691f7038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:ed:ed:fc:43:4f:16:be:2a:2b:e1:8c:81:
4c:5b:d1:f3:ed:ad:aa:22:4a:7f:fc:c2:4b:1b:30:
62:6b:73:51:89:72:7b:94:b1:3b:81:32:6b:73:6f:
31:c3:c5:bb:bb:18:9c:f1:b2:31:2d:06:21:b7:38:
48:b6:10:e4:54:ea:50:5a:f0:c5:12:34:8c:d4:3e:
e7:29:b0:96:f0:39:ca:f2:a9:74:07:e8:b1:19:6e:
af:16:90:cd:c2:a3:d2:ae:d3:f9:37:b9:37:36:e3:
dd:da:33:84:13:45:a4:cb:d4:ce:8a:3f:27:78:eb:
ab:31:d7:93:ca:27:28:80:a3:91:1d:5f:23:9b:1d:
11:4a:a2:5c:2d:4f:95:59:c6:bb:e8:cc:27:4a:15:
e9:46:42:a4:54:df:c9:80:31:f7:45:f4:b5:fd:54:
a0:5a:1f:14:94:e5:11:63:63:c5:00:96:8b:51:0e:
bc:2e:63:b3:91:96:88:71:37:5a:89:6d:8a:aa:fe:
ee:28:4c:62:43:39:33:ce:5c:0e:4f:ee:ce:39:af:
95:c2:93:c4:a3:77:fd:cb:02:d9:13:67:18:47:57:
5d:85:f4:92:74:ef:78:2b:78:8e:3c:b8:0b:2f:ba:
b4:6b:8f:dc:88:e4:49:bf:e3:b8:f1:47:74:ad:a9:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:64:C8:D1:55:F7:11:CD:2E:E1:50:5E:35:23:D2:C0:69:1F:70:38
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:97:37:a8:a0:22:de:60:99:83:9d:3b:2d:16:79:cf:bc:72:
d0:23:08:b2:67:82:ca:b0:a2:de:2c:6f:8d:7a:76:f9:d9:00:
32:af:ce:71:02:58:18:57:61:93:2e:ad:ad:25:e7:0a:8e:19:
1d:e4:4e:96:8d:e4:36:3e:1d:11:af:5a:3a:b8:6b:b7:54:16:
54:7c:74:0e:f0:f5:77:07:aa:b2:a3:e0:2c:0f:f8:b2:ef:77:
74:c3:ec:71:f1:f5:aa:43:50:e2:6a:28:6b:13:a5:43:25:63:
3f:ef:bf:a8:17:9c:f3:64:84:0a:8b:ca:9f:09:89:56:bb:57:
90:cb:de:53:7e:60:ad:e1:20:db:7b:db:5d:66:40:ea:04:2d:
77:a0:72:85:b7:36:12:0f:53:5b:5c:36:1d:5d:be:50:3c:5f:
d3:a2:4a:96:e8:5b:60:2b:96:96:23:7e:bb:ae:5e:47:a3:84:
bb:2f:ae:74:41:28:0e:fa:fa:aa:4f:61:03:0a:c1:e9:19:90:
2c:27:81:fb:53:07:9a:02:75:d7:ac:41:a6:f2:ba:20:dc:49:
ae:ff:95:38:ad:9a:7a:4f:da:7b:ef:7f:f3:60:f9:0d:12:72:
e6:3b:9d:8d:9b:67:14:35:09:6d:ca:b9:58:81:42:0e:46:05:
17:66:bf:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtXjyQr0YAR39u3sxsrqDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDA1ODBlMTcyNWY0NWRlMTA2Yjk3Zjc3ZDljZDc2YmM0
ZGY4MDYwHhcNMjYwOTA0MTcwMTI3WhcNMjYwOTA1MTcwMTI3WjAzMTEwLwYDVQQD
EygzMTY0YzhkMTU1ZjcxMWNkMmVlMTUwNWUzNTIzZDJjMDY5MWY3MDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVzt7fxDTxa+KivhjIFMW9Hz7a2q
Ikp//MJLGzBia3NRiXJ7lLE7gTJrc28xw8W7uxic8bIxLQYhtzhIthDkVOpQWvDF
EjSM1D7nKbCW8DnK8ql0B+ixGW6vFpDNwqPSrtP5N7k3NuPd2jOEE0Wky9TOij8n
eOurMdeTyicogKORHV8jmx0RSqJcLU+VWca76MwnShXpRkKkVN/JgDH3RfS1/VSg
Wh8UlOURY2PFAJaLUQ68LmOzkZaIcTdaiW2Kqv7uKExiQzkzzlwOT+7OOa+VwpPE
o3f9ywLZE2cYR1ddhfSSdO94K3iOPLgLL7q0a4/ciORJv+O48Ud0ranPDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFkyNFV9xHNLuFQXjUj0sBpH3A4MB8GA1UdIwQY
MBaAFGbQWA4XJfRd4Qa5f3fZzXa8TfgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMt
OTVkOTVhY2U4MjgxLzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMtOTVkOTVhY2U4Mjgx
LzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpc3qKAi
3mCZg507LRZ5z7xy0CMIsmeCyrCi3ixvjXp2+dkAMq/OcQJYGFdhky6trSXnCo4Z
HeROlo3kNj4dEa9aOrhrt1QWVHx0DvD1dweqsqPgLA/4su93dMPscfH1qkNQ4moo
axOlQyVjP++/qBec82SECovKnwmJVrtXkMveU35greEg23vbXWZA6gQtd6Byhbc2
Eg9TW1w2HV2+UDxf06JKluhbYCuWliN+u65eR6OEuy+udEEoDvr6qk9hAwrB6RmQ
LCeB+1MHmgJ116xBpvK6INxJrv+VOK2aek/ae+9/82D5DRJy5judjZtnFDUJbcq5
WIFCDkYFF2a/GQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:37:39 2026 by rpki-client